Redirecting Ports for Well known services

[cahook]

I have a situation where I would like to allow a customer to access telnet on his computer which is inside of my NATTED network. Because I still want to use regular telnet to access the router, I wanted to set up a situation where the user can telnet to a specific port (say 13005 for example) and have the MT redirect it to his specific computer using the proper port for telnet (23)

I have this rule in place, but it does not seem to be working correctly

chain=dstnat dst-address=MT_WAN_IP dst-port=13005 action=redirect to-addresses=CUST_LAN_IP dst-port=23

I have also used action=dstnat without any better results.

I hope that someone can tell me what I am missing here. Thanks

[Giepie]

@cahook

I have a situation where I would like to allow a customer to access telnet on his computer which is inside of my NATTED network. Because I still want to use regular telnet to access the router, I wanted to set up a situation where the user can telnet to a specific port (say 13005 for example) and have the MT redirect it to his specific computer using the proper port for telnet (23)

I have this rule in place, but it does not seem to be working correctly

chain=dstnat dst-address=MT_WAN_IP dst-port=13005 action=redirect to-addresses=CUST_LAN_IP dst-port=23

I have also used action=dstnat without any better results.

I hope that someone can tell me what I am missing here. Thanks

I would suggest this:

chain=dstnat dst-address=MT_WAN_IP protocol=tcp dst-port=13005 action=dst-nat to-addresses=ROUTER_INTERNAL_IP to-ports=23

I use this rule all the time for RDP etc, with no problems.

Remember to put this rule above your Masquerading rule, otherwise it might not work.